Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Commerce | Adobe | - (including) | - (including) |
| Commerce | Adobe | 2.3.7 (including) | 2.3.7 (including) |
| Commerce | Adobe | 2.3.7-p1 (including) | 2.3.7-p1 (including) |
| Commerce | Adobe | 2.3.7-p2 (including) | 2.3.7-p2 (including) |
| Commerce | Adobe | 2.3.7-p3 (including) | 2.3.7-p3 (including) |
| Commerce | Adobe | 2.3.7-p4 (including) | 2.3.7-p4 (including) |
| Commerce | Adobe | 2.3.7-p4-ext1 (including) | 2.3.7-p4-ext1 (including) |
| Commerce | Adobe | 2.3.7-p4-ext2 (including) | 2.3.7-p4-ext2 (including) |
| Commerce | Adobe | 2.3.7-p4-ext3 (including) | 2.3.7-p4-ext3 (including) |
| Commerce | Adobe | 2.3.7-p4-ext4 (including) | 2.3.7-p4-ext4 (including) |
| Commerce | Adobe | 2.4.0 (including) | 2.4.0 (including) |
| Commerce | Adobe | 2.4.0-ext-1 (including) | 2.4.0-ext-1 (including) |
| Commerce | Adobe | 2.4.0-ext-2 (including) | 2.4.0-ext-2 (including) |
| Commerce | Adobe | 2.4.0-ext-3 (including) | 2.4.0-ext-3 (including) |
| Commerce | Adobe | 2.4.0-ext-4 (including) | 2.4.0-ext-4 (including) |
| Commerce | Adobe | 2.4.1 (including) | 2.4.1 (including) |
| Commerce | Adobe | 2.4.1-ext-1 (including) | 2.4.1-ext-1 (including) |
| Commerce | Adobe | 2.4.1-ext-2 (including) | 2.4.1-ext-2 (including) |
| Commerce | Adobe | 2.4.1-ext-3 (including) | 2.4.1-ext-3 (including) |
| Commerce | Adobe | 2.4.1-ext-4 (including) | 2.4.1-ext-4 (including) |
| Commerce | Adobe | 2.4.2 (including) | 2.4.2 (including) |
| Commerce | Adobe | 2.4.2-ext-1 (including) | 2.4.2-ext-1 (including) |
| Commerce | Adobe | 2.4.2-ext-2 (including) | 2.4.2-ext-2 (including) |
| Commerce | Adobe | 2.4.2-ext-3 (including) | 2.4.2-ext-3 (including) |
| Commerce | Adobe | 2.4.2-ext-4 (including) | 2.4.2-ext-4 (including) |
| Commerce | Adobe | 2.4.2-p1 (including) | 2.4.2-p1 (including) |
| Commerce | Adobe | 2.4.2-p2 (including) | 2.4.2-p2 (including) |
| Commerce | Adobe | 2.4.3 (including) | 2.4.3 (including) |
| Commerce | Adobe | 2.4.3-ext-1 (including) | 2.4.3-ext-1 (including) |
| Commerce | Adobe | 2.4.3-ext-2 (including) | 2.4.3-ext-2 (including) |
| Commerce | Adobe | 2.4.3-ext-3 (including) | 2.4.3-ext-3 (including) |
| Commerce | Adobe | 2.4.3-ext-4 (including) | 2.4.3-ext-4 (including) |
| Commerce | Adobe | 2.4.3-p1 (including) | 2.4.3-p1 (including) |
| Commerce | Adobe | 2.4.3-p2 (including) | 2.4.3-p2 (including) |
| Commerce | Adobe | 2.4.4 (including) | 2.4.4 (including) |
| Commerce | Adobe | 2.4.4-p1 (including) | 2.4.4-p1 (including) |
| Commerce | Adobe | 2.4.4-p10 (including) | 2.4.4-p10 (including) |
| Commerce | Adobe | 2.4.4-p2 (including) | 2.4.4-p2 (including) |
| Commerce | Adobe | 2.4.4-p3 (including) | 2.4.4-p3 (including) |
| Commerce | Adobe | 2.4.4-p4 (including) | 2.4.4-p4 (including) |
| Commerce | Adobe | 2.4.4-p5 (including) | 2.4.4-p5 (including) |
| Commerce | Adobe | 2.4.4-p6 (including) | 2.4.4-p6 (including) |
| Commerce | Adobe | 2.4.4-p7 (including) | 2.4.4-p7 (including) |
| Commerce | Adobe | 2.4.4-p8 (including) | 2.4.4-p8 (including) |
| Commerce | Adobe | 2.4.4-p9 (including) | 2.4.4-p9 (including) |
| Commerce | Adobe | 2.4.5 (including) | 2.4.5 (including) |
| Commerce | Adobe | 2.4.5-p1 (including) | 2.4.5-p1 (including) |
| Commerce | Adobe | 2.4.5-p2 (including) | 2.4.5-p2 (including) |
| Commerce | Adobe | 2.4.5-p3 (including) | 2.4.5-p3 (including) |
| Commerce | Adobe | 2.4.5-p4 (including) | 2.4.5-p4 (including) |
| Commerce | Adobe | 2.4.5-p5 (including) | 2.4.5-p5 (including) |
| Commerce | Adobe | 2.4.5-p6 (including) | 2.4.5-p6 (including) |
| Commerce | Adobe | 2.4.5-p7 (including) | 2.4.5-p7 (including) |
| Commerce | Adobe | 2.4.5-p8 (including) | 2.4.5-p8 (including) |
| Commerce | Adobe | 2.4.5-p9 (including) | 2.4.5-p9 (including) |
| Commerce | Adobe | 2.4.6 (including) | 2.4.6 (including) |
| Commerce | Adobe | 2.4.6-p1 (including) | 2.4.6-p1 (including) |
| Commerce | Adobe | 2.4.6-p2 (including) | 2.4.6-p2 (including) |
| Commerce | Adobe | 2.4.6-p3 (including) | 2.4.6-p3 (including) |
| Commerce | Adobe | 2.4.6-p4 (including) | 2.4.6-p4 (including) |
| Commerce | Adobe | 2.4.6-p5 (including) | 2.4.6-p5 (including) |
| Commerce | Adobe | 2.4.6-p6 (including) | 2.4.6-p6 (including) |
| Commerce | Adobe | 2.4.6-p7 (including) | 2.4.6-p7 (including) |
| Commerce | Adobe | 2.4.7 (including) | 2.4.7 (including) |
| Commerce | Adobe | 2.4.7-b1 (including) | 2.4.7-b1 (including) |
| Commerce | Adobe | 2.4.7-b2 (including) | 2.4.7-b2 (including) |
| Commerce | Adobe | 2.4.7-p1 (including) | 2.4.7-p1 (including) |
| Commerce | Adobe | 2.4.7-p2 (including) | 2.4.7-p2 (including) |
| Commerce_b2b | Adobe | 1.3.3 (including) | 1.3.3 (including) |
| Commerce_b2b | Adobe | 1.3.3-p10 (including) | 1.3.3-p10 (including) |
| Commerce_b2b | Adobe | 1.3.4 (including) | 1.3.4 (including) |
| Commerce_b2b | Adobe | 1.3.4-p9 (including) | 1.3.4-p9 (including) |
| Commerce_b2b | Adobe | 1.3.5 (including) | 1.3.5 (including) |
| Commerce_b2b | Adobe | 1.3.5-p7 (including) | 1.3.5-p7 (including) |
| Commerce_b2b | Adobe | 1.4.2 (including) | 1.4.2 (including) |
| Commerce_b2b | Adobe | 1.4.2-p1 (including) | 1.4.2-p1 (including) |
| Commerce_b2b | Adobe | 1.4.2-p2 (including) | 1.4.2-p2 (including) |
| Magento | Adobe | - (including) | - (including) |
| Magento | Adobe | 2.4.3 (including) | 2.4.3 (including) |
| Magento | Adobe | 2.4.4 (including) | 2.4.4 (including) |
| Magento | Adobe | 2.4.4-p1 (including) | 2.4.4-p1 (including) |
| Magento | Adobe | 2.4.4-p10 (including) | 2.4.4-p10 (including) |
| Magento | Adobe | 2.4.4-p2 (including) | 2.4.4-p2 (including) |
| Magento | Adobe | 2.4.4-p3 (including) | 2.4.4-p3 (including) |
| Magento | Adobe | 2.4.4-p4 (including) | 2.4.4-p4 (including) |
| Magento | Adobe | 2.4.4-p5 (including) | 2.4.4-p5 (including) |
| Magento | Adobe | 2.4.4-p6 (including) | 2.4.4-p6 (including) |
| Magento | Adobe | 2.4.4-p7 (including) | 2.4.4-p7 (including) |
| Magento | Adobe | 2.4.4-p8 (including) | 2.4.4-p8 (including) |
| Magento | Adobe | 2.4.4-p9 (including) | 2.4.4-p9 (including) |
| Magento | Adobe | 2.4.5 (including) | 2.4.5 (including) |
| Magento | Adobe | 2.4.5-p1 (including) | 2.4.5-p1 (including) |
| Magento | Adobe | 2.4.5-p2 (including) | 2.4.5-p2 (including) |
| Magento | Adobe | 2.4.5-p3 (including) | 2.4.5-p3 (including) |
| Magento | Adobe | 2.4.5-p4 (including) | 2.4.5-p4 (including) |
| Magento | Adobe | 2.4.5-p5 (including) | 2.4.5-p5 (including) |
| Magento | Adobe | 2.4.5-p6 (including) | 2.4.5-p6 (including) |
| Magento | Adobe | 2.4.5-p7 (including) | 2.4.5-p7 (including) |
| Magento | Adobe | 2.4.5-p8 (including) | 2.4.5-p8 (including) |
| Magento | Adobe | 2.4.5-p9 (including) | 2.4.5-p9 (including) |
| Magento | Adobe | 2.4.6 (including) | 2.4.6 (including) |
| Magento | Adobe | 2.4.6-p1 (including) | 2.4.6-p1 (including) |
| Magento | Adobe | 2.4.6-p2 (including) | 2.4.6-p2 (including) |
| Magento | Adobe | 2.4.6-p3 (including) | 2.4.6-p3 (including) |
| Magento | Adobe | 2.4.6-p4 (including) | 2.4.6-p4 (including) |
| Magento | Adobe | 2.4.6-p5 (including) | 2.4.6-p5 (including) |
| Magento | Adobe | 2.4.6-p6 (including) | 2.4.6-p6 (including) |
| Magento | Adobe | 2.4.6-p7 (including) | 2.4.6-p7 (including) |
| Magento | Adobe | 2.4.7 (including) | 2.4.7 (including) |
| Magento | Adobe | 2.4.7-b1 (including) | 2.4.7-b1 (including) |
| Magento | Adobe | 2.4.7-p1 (including) | 2.4.7-p1 (including) |
| Magento | Adobe | 2.4.7-p2 (including) | 2.4.7-p2 (including) |